Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
bma
Community Member

MRTG with snmp

Hi

Pix 6.3, enable snmp-server host to a windows 2003 server running MRTG. When MRTG try to get traffic from PIX inside interface, nothing show up. No errors in pix and windows, ping is fine. Could help to list some documents about PIX 6.3 snmp setup with MRTG?

Thanks

ben

6 REPLIES

Re: MRTG with snmp

Try with that ! Replace the community string and IP. Hope that helps.

======== BEGINNING ===========================

# Created by v4only

### Global Config Options

# for UNIX

WorkDir: /var/www/localhost/htdocs/mrtg

Htmldir: /var/www/localhost/htdocs/mrtg

Imagedir: /var/www/localhost/htdocs/mrtg

IconDir: /var/www/localhost/htdocs/mrtg/icons

EnableIPv6: no

Target[pix-cpu]:.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1&.1.3.6.1.4.1.9.9.109.1.1.1.1.5.1:snmp-password@111.111.111.1

RouterUptime[pix-cpu]:snmp-password@111.111.111.1

Title[pix-cpu]: PIX 501 CPU LOAD

PageTop[pix-cpu]:

PIX 501 : CPU Load %

MaxBytes[pix-cpu]:100

ShortLegend[pix-cpu]:%

XSize[pix-cpu]:380

YSize[pix-cpu]:100

YLegend[pix-cpu]: CPU Utilization

Legend1[pix-cpu]: 5 sec CPU load %

Legend2[pix-cpu]: 1 min CPU load %

Legend3[pix-cpu]: Maximal 5 sec CPU load %

Legend4[pix-cpu]: Maximal 1 min CPU load %

LegendI[pix-cpu]: 5 sec load:

LegendO[pix-cpu]: 1 min load:

Options[pix-cpu]: gauge, growright, nopercent

### Interface 1 >> Descr: 'PIX-Firewall-'outside'-interface' | Name: ''| Ip: '111.111.111.1' | Eth: '00-0a-f4-cc-ee-cc' ###

### The following interface is commented out because:

### * --ifref=name is not unique for this interface

#

Target[pix_outside]: 1:snmp-password@111.111.111.1

SetEnv[pix_outside]: MRTG_INT_IP="111.111.111.1"

#MRTG_INT_DESCR="PIX-Firewall-'outside'-interface"

MaxBytes[pix_outside]: 1250000

Title[pix_outside]: 1 -- PIX501

PageTop[pix_outside]:

Outside -- PIX501

System: PIX501 in Neverland
Maintainer: admin@domain.com
Description:PIX Firewall outside interface
ifType: ethernetCsmacd (6)
ifName:
Max Speed: 10.0 Mbits/s
Ip: 111.111.111.1 ()

### Interface 2 >> Descr: 'PIX-Firewall-'inside'-interface' | Name: '' |Ip: '192.168.1.1' | Eth: '00-0a-f4-bb-ff-ee' ###

### The following interface is commented out because:

### * --ifref=name is not unique for this interface

#

Target[pix_inside]: 2:snmp-password@111.111.111.1

SetEnv[pix_inside]: MRTG_INT_IP="192.168.1.1"

#MRTG_INT_DESCR="PIX Firewall inside interface"

MaxBytes[pix_inside]: 12500000

Title[pix_inside]: INSIDE -- PIX 501

PageTop[pix_inside]:

INSIDE -- PIX 501

System: PIX501 in Neverland
Maintainer:
Description: PIX Firewall inside interface
ifType: ethernetCsmacd (6)
ifName:
Max Speed: 100.0 Mbits/s
Ip: 192.168.1.1

======== END =============================

sincerely

Patrick

bma
Community Member

Re: MRTG with snmp

thanks.

do you have simple utility to test snmp?

ben

Re: MRTG with snmp

Community Member

Re: MRTG with snmp

If you are running MS-Windows, My favorite quick tool to test snmp is "Getif" both the 2.2 and 2.3.1 versions work great for quick "point-at-a-device-and see-the-basic-mib-2-stuff"

It can do an snmpwalk too

bma
Community Member

Re: MRTG with snmp

Thanks

ben

Community Member

Re: MRTG with snmp

Well, it is not a browser, but this is great to get instant traffic graphs, the tool is called STG

http://leonidvm.chat.ru/ and if it works, you got snmp running ok.

514
Views
0
Helpful
6
Replies
CreatePlease to create content